6.1
Medium
CVE-2024-42423 Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when…
Description
Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized actions leading to information disclosure and tampering.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Wyse Proprietary OS (Modern ThinOS) | Versions not published |
Other CVEs of Wyse Proprietary OS (Modern ThinOS)
The 11 CVEs of Wyse Proprietary OS (Modern ThinOS) →
CVE-2025-27688
Dell ThinOS 2408 and prior, contains an improper permissions vulnerability
7.8
High
CVE-2025-26331
Dell ThinOS 2411 and prior, contains an Improper Neutralization of Special Elements used in a Command ('Command…
7.8
High
CVE-2024-53289
Dell ThinOS version 2408 contains a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
7.8
High
CVE-2024-53290
Dell ThinOS version 2408 contains an Improper Neutralization of Special Elements used in a Command ('Command Injection')…
8.4
High